From owner-FreeBSD-net-jp@jp.freebsd.org  Sun Jul 22 11:55:39 2001
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id LAA33283;
	Sun, 22 Jul 2001 11:55:39 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from mgate10.so-net.ne.jp (mgate10.so-net.ne.jp [210.139.254.157])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id LAA33278
	for <FreeBSD-net-jp@jp.freebsd.org>; Sun, 22 Jul 2001 11:55:39 +0900 (JST)
	(envelope-from mmasuda@ba2.so-net.ne.jp)
Received: from mail.ba2.so-net.ne.jp (mail.ba2.so-net.ne.jp [210.139.254.21])
	by mgate10.so-net.ne.jp (8.9.3/3.7W01060506) with ESMTP id LAA02561
	for <FreeBSD-net-jp@jp.freebsd.org>; Sun, 22 Jul 2001 11:55:38 +0900 (JST)
Received: from ba2.so-net.ne.jp (xdsl041098.211015.metallic.ne.jp [211.15.41.98])
	by mail.ba2.so-net.ne.jp  with ESMTP id f6M2tbu15588
	for <FreeBSD-net-jp@jp.freebsd.org>; Sun, 22 Jul 2001 11:55:38 +0900 (JST)
Message-ID: <3B5A40A9.14B361B@ba2.so-net.ne.jp>
Date: Sun, 22 Jul 2001 11:55:37 +0900
From: "Masuda,Masashi" <mmasuda@ba2.so-net.ne.jp>
X-Mailer: Mozilla 4.7 [ja] (WinNT; U)
X-Accept-Language: ja,en
MIME-Version: 1.0
To: FreeBSD-net-jp@jp.freebsd.org
References: <4.3.2-J.20010719010158.00c55b40@mail.netwave.or.jp>
	 <ybsd76xadee.wl@ett.sat.t.u-tokyo.ac.jp> <4.3.2-J.20010722020707.00b5aef0@mail.netwave.or.jp>
Content-Type: text/plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+010328
X-Sequence: FreeBSD-net-jp 3241
Subject: [FreeBSD-net-jp 3241] Re: IPFW+NATD
 =?ISO-2022-JP?B?GyRCJEdGYkl0JEsbKEI=?= Firewall
 =?ISO-2022-JP?B?GyRCJHI5PUNbGyhC?= 
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: mmasuda@ba2.so-net.ne.jp

  $BA}ED!s<+Bp(BADSL $BMQ$N(Bipfw $B$r9=C[Cf!w<+Bp$G$9!#(B

Kana Akira wrote:

> >$B!&(BMAIL$B%5!<%P!J7s(BDNS+WWW+POP3$B!K$O(B192.168.1.20 $B$KCV$/(B
> >$B!&(Bipfw $B$r$.$C$A$j@_Dj$7$FEv3:%^%7%s$,$N$C$H$i$l$F$b(B192.168.1.0/24 $B$KBP(B
> >  $B$9$kF'$_Bf$K$O;H$($J$$$h$&$K$9$k(B
> >
> >$B$C$F46$8$K$7$^$9$M!#(BNAT $B$r$$$l$FJ#;(2=$9$k$N$O$a$s$I$/$5$/$"$j$^$;$s!)(B
> 
> $B3N$+$K$=$&46$8$k$N$G$9$,!"(Bipfw$B$N8!F$$N$?$a9=C[>pJs$r(BWeb$B$G=8$a$F$$$?$i(B
> kernel$B$G(Bbpf$B$r;H$($J$$$h$&$K(Bconfig$B$9$Y$7!"$H$$$&$N$,$"$j$^$7$?!#(B
> $B$3$l$C$F$=$&$9$Y$-$J$s$G$7$g$&$+!)!!(Bmail$B%5!<%P$d(BWWW$B%5!<%P$G%H%i%V%kD4::(B
> $B$r$9$k$H$-$K(Btcpdump$B$9$k$3$H$,$"$j$=$&$G!"(Bbpf$B$OF~$l$F$*$-$?$$$s$G$9$,!#(B

$B%5%$%H%]%j%7!<$NLdBj$G$7$g$&$,!";d$J$i?.Mj$G$-$J$$%M%C%H%o!<%/$+$i%"%/(B
$B%;%9$5$l$k%^%7%s$K(Bbpf $B$O@dBPF~$l$^$;$s$M!#EpD0$H$$$&E@$G$O%9%$%C%A%s%0(B
$B%O%V$K$D$J$2$F$*$1$PB?>/$O0BA4$G$9$1$I!"%Q%1%C%H$N56B$$H$$$&4QE@$G9M$((B
$B$k$H(Bbpf $B$O6/NO$9$.$^$9!#(B

$B$A$J$_$K;d$O(Btcpdump $B$7$?$$$H$-$K$O!"$=$NEv3:%^%7%s$@$1(BHUB $B$G$D$J$.$+(B
$B$($F!"(Btcpdump $B$r;H$($k$h$&$K$7$F$$$k%/%i%$%"%s%H%^%7%s(B($B%N!<%H(BPC)$B$r$D(B
$B$J$2$FD4::$7$^$9!#(B



> $B$^$?>h$C<h$i$l$?%5!<%P$N(Bipfw$B$N@_Dj$b$$$8$i$l$F$7$^$C$?$i4JC1$KB>$N(B
> $B%5!<%P$d%M%C%H%o!<%/$K%"%/%;%9$5$l$F$7$^$$$=$&$G!&!&!&!#(B


$B$3$l$b%5%$%H%]%j%7!<$NLdBj$G$7$g$&$,!"(Bkern.securelevel $B$r(B3$B$K$7$F$*$/(B
$B$3$H$G!"%j%V!<%H$r9T$o$:$K(Bipfw $B$N%k!<%k$rJQ99$9$k$N$rHs>o$K:$Fq$K$9$k(B
$B$3$H$,=PMh$^$9!#(B

$B$H$$$&$o$1$G!"JL$K(Bsyslog $B%^%7%s$rMQ0U$7$F$*$$$F!V0U?^$7$J$$%j%V!<%H!W(B
$B$,5/$-$?$i$9$0$K7HBSEEOC$K%a!<%k$rHt$P$9$h$&$J;E3]$1(B(swatch $B$H$+$G(B)
$B$r:n$k$3$H$G!";d$ONI$7$H$7$F$$$^$9!#$^$!$3$&$$$&1?MQJ}K!$b$"$k$H$$$&(B
$B$3$H$G!#(B

> $B!V%[%9%H%Y!<%9(Bfirewall$B!W$O:#$^$GF,$KIb$+$S$^$;$s$G$7$?!#(BFirewall$B$O#1Bf(B
> $BJL$KCV$/$H$7$F!"(BMAIL$B%5!<%P$d(BWWW$B%5!<%P$b$=$l$>$l(Bipfw$B$rF~$l$F8G$a$k$H$$$&(B
> $B$N$b$$$$$+$b$7$l$^$;$s$M!#(Bipfw$B"*(Bnatd$B"*(Bipfw$B$HO"$J$C$F$-$?$iB.EY$OCY$/$J(B
> $B$k$N$G$7$g$&$+!)!!:#2s8!F$$7$F$$$k(Bipfw$B$d(Bnatd$B$NB.EY$b$H$F$b5$$K$J$j$^$9!#(B
> $B:#;~$N%Q%=%3%s$GAH$a$P(Bipfw$B$d(Bnatd$B$G$NB.EYDc2<$dIi2Y$C$F5$$K$7$J$/$F$b$$(B
> $B$$$b$N$G$7$g$&$+!)(B


  $BM}O@E*$K$OCY1d$,H/@8$9$k$G$7$g$&!#$1$I(Bfailure safe $BE*$J;kE@$+$i9M$((B
$B$k$H(B

$B!&%M%C%H%o!<%/$N%;%-%e%j%F%#%]%j%7!<$r(Bfirewall $B$K<BAu(B
$B!&%[%9%H$N%;%-%e%j%F%#%]%j%7!<$r%[%9%H%Y!<%9$J(Bfirewall(ipfw) $B$G<BAu(B

$B$7$F$*$/$N$,$$$$$G$7$g$&$7!":#8e>o<1$K$J$C$F$$$/$s$8$c$J$$$+$H;W$$$^$9!#(B


-- 
/*********************************************************************
 * Name; Masuda Masashi
 * mail: mmasuda@ba2.so-net.ne.jp
 * web : http://www02.so-net.ne.jp/~masuda/  <$BF|5-$@$1$O:G6a99?7Cf(B>
 *********************************************************************/
